Bug#854739: patch for CVE-2017-5591

2017-03-23 Thread W. Martin Borgert
Identical fix is now also in new upstream release 1.3.2.

Bug#854739: patch for CVE-2017-5591

2017-03-23 Thread W. Martin Borgert
Control: tag -1 + patch The patch seems to be OK for sleekxmpp, too.

Bug#854739: patch for CVE-2017-5591

2017-03-23 Thread W. Martin Borgert
slixmpp has a simple patch: slixmpp/plugins/xep_0280/carbons.py @@ -61,10 +61,12 @@ def session_bind(self, jid): self.xmpp.plugin['xep_0030'].add_feature('urn:xmpp:carbons:2') def _handle_carbon_received(self, msg): -self.xmpp.event('carbon_received', msg) +if msg['